Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
efore 2.4.15, foogallery-premium - Cross-Site Scripting (XSS) (CVE-2024-2762)
The FooGallery WordPress plugin before 2.4.15, foogallery-premium WordPress plugin before 2.4.15 does not validate and escape some of its Gallery settings before outputting them back in the page, which could allow users with a role as low as Author to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin
PLUGIN
efore 2.4.15, foogallery-premium
CVE-2024-2762
Risk Score